radosgw/swift emulate split read/write acls?
With ceph radosgw/swift; setting just the read or write acl clears the other. Unless that behavior is specifically desired, it's currently necessary to set both "-r" and "-w" (on the swift command) at the same time. The swift documentation strongly suggests that is not the case with native swift.
ceph stores just one combined read/write acl, and if either of -r -w was specified, re-initializes this acl before applying the changes. We could emulate swift's behavior more closely by looking to to see if one of -r -w was not specified, and if so, filtering the appropriate bits of the old acl into the new acl.
- Subject changed from radosgw to radosgw/swift emulate split read/write acls?
I've tried this out with swift (ocata). It definitely allows you to just update -r or -w acls separately.
- Assignee set to Marcus Watts
- Status changed from New to Need Review
- Backport set to kraken
- Backport changed from kraken to kraken, jewel
- Status changed from Need Review to Pending Backport
- Copied to Backport #20586: kraken: radosgw/swift emulate split read/write acls? added
- Copied to Backport #20587: jewel: radosgw/swift emulate split read/write acls? added
- Status changed from Pending Backport to Need More Info
Jewel backport is non-trivial: needs 782aaefce763e9c149f43d25d2c6632125df368f to be cherry-picked first.
- Status changed from Need More Info to Pending Backport
- Backport changed from kraken, jewel to jewel
- Backport changed from jewel to jewel kraken
Re-adding rejected kraken backport to appease backport tooling.
Also available in: Atom